Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json)
Hash identifier: aTZqAEFtPsBMBSn0npDhKBkKGi8RLmNR9M34fgINCFw=
Subject key identifier: 93:02:92:2D:55:25:46:B3:C5:51:E6:D4:36:E4:4C:96:61:B5:B0:DE
Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Certificate serial: 01987E6680A47919F011793FB8A72693F409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
Manifest number: 06DF
Signing time: Wed 06 Aug 2025 08:01:43 +0000
Manifest this update: Wed 06 Aug 2025 08:01:43 +0000
Manifest next update: Thu 07 Aug 2025 08:01:43 +0000
Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: 1ll6+wB6R5SMnZqZjF6EiIRqqPGUHl/YlTp7R/hQdZg=)
2: XZf82C_CN-vLQbpUrT-DW4sm3Y0.roa (hash: pAKJ5T3FZi6TyLDIs/UxYmL+rXXkynL3g9BJ4W4ROUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:80:a4:79:19:f0:11:79:3f:b8:a7:26:93:f4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf
Validity
Not Before: Aug 6 08:01:43 2025 GMT
Not After : Aug 7 08:01:43 2025 GMT
Subject: CN=9302922d552546b3c551e6d436e44c9661b5b0de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:40:f0:1a:61:6a:d8:bc:8d:50:65:fd:e1:
0c:1d:7c:b9:d6:08:93:c6:e1:80:ff:10:67:eb:53:
aa:09:1b:ea:d1:a5:91:c7:a0:20:37:33:cb:a1:97:
ca:c8:63:e3:a7:76:86:48:0d:1e:88:da:52:9c:98:
f0:7a:72:08:42:cc:83:fc:e9:9a:a5:9b:cc:44:7c:
12:1d:ba:aa:8c:79:5a:6e:38:a2:0f:c0:4b:ac:4f:
4e:4e:81:06:03:cc:21:b7:34:7a:ac:34:02:da:0c:
cf:d4:b8:33:9b:ba:dd:9a:b9:e6:18:f7:ac:24:1b:
ee:77:91:05:8f:cb:29:0b:86:7f:dd:bd:02:ec:c8:
51:1e:1d:98:ce:79:6b:6e:8b:10:ec:43:26:0d:ba:
24:ee:4b:d7:ca:80:a9:01:38:7b:1e:ad:fc:4d:fb:
5d:84:63:68:58:2c:8a:f6:a5:d1:9e:05:37:88:32:
11:a1:54:7e:60:45:7c:d7:d4:2c:20:70:2c:03:19:
29:c2:86:23:47:20:27:45:13:2e:e6:12:0b:95:3c:
53:2e:b1:27:12:04:ac:44:28:13:35:35:be:9c:fa:
33:ed:71:f3:91:7e:c3:ac:49:5d:56:43:5b:e0:55:
db:71:22:4d:e7:26:b6:c0:06:4a:f1:94:6e:e6:5c:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:02:92:2D:55:25:46:B3:C5:51:E6:D4:36:E4:4C:96:61:B5:B0:DE
X509v3 Authority Key Identifier:
keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:08:bb:34:c5:b6:da:b5:c2:ae:04:cd:d3:9b:5a:49:f1:80:
12:d1:7e:38:85:88:97:3b:0e:b2:72:53:d7:be:4b:21:3a:f7:
05:47:41:5b:6b:6d:05:c7:61:60:12:64:e3:9a:0d:3c:16:0b:
89:12:86:f8:71:18:71:6c:b3:ff:5e:ed:20:9f:fb:3f:c3:8b:
34:0d:53:82:a1:6a:29:22:9f:a8:87:54:cf:39:7b:6c:78:11:
13:3f:25:0e:b1:c7:8f:9c:98:38:9a:3c:95:09:04:12:58:17:
56:da:aa:69:54:35:91:00:35:92:4f:a3:f4:f6:57:bb:42:58:
e5:c8:5a:61:57:c2:0a:38:81:a0:50:68:5b:64:0a:62:5b:29:
e4:9e:fb:d7:9e:9d:37:6e:39:09:bb:1d:b8:8c:de:06:f2:b3:
03:80:0d:83:0f:0d:d1:09:cd:86:81:fd:40:ba:d3:db:25:f9:
90:3f:7c:06:de:75:e1:02:52:a3:04:16:ab:d1:e6:55:aa:e0:
4f:ff:46:66:5d:3b:76:2d:c7:7c:eb:72:1b:86:0c:ee:ea:9d:
a7:fd:17:00:e1:8a:cc:03:50:ed:4a:12:b6:45:21:fb:fe:7b:
9c:a8:c5:4c:bd:ac:ca:6f:46:df:5a:9a:9b:45:13:86:79:ab:
42:9c:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:21:10 2025 by rpki-client